medium6.5
CVE-2022-29620
FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a …
Impact
FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerability
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Filezilla-Project | Filezilla Client | Version 3.59.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://whichbuffer.medium.com/filezilla-client-cleartext-storage-of-sensitive-information-in-memory-vulnerability-83958c1e1643
- https://youtu.be/ErZl1i7McHk
- https://youtu.be/eSlfQQytIq0
- https://whichbuffer.medium.com/filezilla-client-cleartext-storage-of-sensitive-information-in-memory-vulnerability-83958c1e1643
- https://youtu.be/ErZl1i7McHk
- https://youtu.be/eSlfQQytIq0